Operations Actions Resource types Condition keys

Actions, resources, and condition keys for Amazon Interactive Video Service Chat

Amazon Interactive Video Service Chat (service prefix: ivschat) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon Interactive Video Service Chat
Actions defined by Amazon Interactive Video Service Chat
Resource types defined by Amazon Interactive Video Service Chat
Condition keys for Amazon Interactive Video Service Chat

API operations defined by Amazon Interactive Video Service Chat

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	IAM action	Access level
CreateChatToken	ivschat:CreateChatToken	Write
CreateLoggingConfiguration	ivschat:CreateLoggingConfiguration	Write
CreateLoggingConfiguration	ivschat:TagResource	Tagging, Write
CreateRoom	ivschat:CreateRoom	Write
CreateRoom	ivschat:TagResource	Tagging, Write
DeleteLoggingConfiguration	ivschat:DeleteLoggingConfiguration	Write
DeleteMessage	ivschat:DeleteMessage	Write
DeleteRoom	ivschat:DeleteRoom	Write
DisconnectUser	ivschat:DisconnectUser	Write
GetLoggingConfiguration	ivschat:GetLoggingConfiguration	Read
GetRoom	ivschat:GetRoom	Read
ListLoggingConfigurations	ivschat:ListLoggingConfigurations	List
ListRooms	ivschat:ListRooms	List
ListTagsForResource	ivschat:ListTagsForResource	Read
SendEvent	ivschat:SendEvent	Write
TagResource	ivschat:TagResource	Tagging, Write
UntagResource	ivschat:UntagResource	Tagging, Write
UpdateLoggingConfiguration	ivschat:UpdateLoggingConfiguration	Write
UpdateRoom	ivschat:UpdateRoom	Write

Actions defined by Amazon Interactive Video Service Chat

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
CreateChatToken	Grants permission to create an encrypted token that is used to establish an individual WebSocket connection to a room	Room*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateLoggingConfiguration	Grants permission to create a logging configuration that allows clients to record room messages	Logging-Configuration*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
CreateRoom	Grants permission to create a room that allows clients to connect and pass messages	Room*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Write
DeleteLoggingConfiguration	Grants permission to delete the logging configuration for a specified logging configuration ARN	Logging-Configuration*	aws:ResourceTag/${TagKey}	Write
DeleteMessage	Grants permission to send an event to a specific room which directs clients to delete a specific message	Room*	aws:ResourceTag/${TagKey}	Write
DeleteRoom	Grants permission to delete the room for a specified room ARN	Room*	aws:ResourceTag/${TagKey}	Write
DisconnectUser	Grants permission to disconnect all connections using a specified user ID from a room	Room*	aws:ResourceTag/${TagKey}	Write
GetLoggingConfiguration	Grants permission to get the logging configuration for a specified logging configuration ARN	Logging-Configuration*	aws:ResourceTag/${TagKey}	Read
GetRoom	Grants permission to get the room configuration for a specified room ARN	Room*	aws:ResourceTag/${TagKey}	Read
ListLoggingConfigurations	Grants permission to get summary information about logging configurations	Logging-Configuration*	aws:ResourceTag/${TagKey}	List
ListRooms	Grants permission to get summary information about rooms	Room*	aws:ResourceTag/${TagKey}	List
ListTagsForResource	Grants permission to get information about the tags for a specified ARN	Room	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Read
SendEvent	Grants permission to send an event to a room	Room*	aws:ResourceTag/${TagKey}	Write
TagResource	Grants permission to add or update tags for a resource with a specified ARN	Logging-Configuration	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
TagResource		Room	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource	Grants permission to remove tags for a resource with a specified ARN	Logging-Configuration	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UntagResource		Room	aws:ResourceTag/${TagKey} aws:TagKeys	Tagging, Write
UpdateLoggingConfiguration	Grants permission to update the logging configuration for a specified logging configuration ARN	Logging-Configuration*	aws:ResourceTag/${TagKey}	Write
UpdateRoom	Grants permission to update the room configuration for a specified room ARN	Room*	aws:ResourceTag/${TagKey}	Write

Resource types defined by Amazon Interactive Video Service Chat

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
Logging-Configuration	arn:${Partition}:ivschat:${Region}:${Account}:logging-configuration/${ResourceId}	aws:ResourceTag/${TagKey}
Room	arn:${Partition}:ivschat:${Region}:${Account}:room/${ResourceId}	aws:ResourceTag/${TagKey}

Condition keys for Amazon Interactive Video Service Chat

Amazon Interactive Video Service Chat defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by the tags associated with the request	String
aws:ResourceTag/${TagKey}	Filters access by the tags associated with the resource	String
aws:TagKeys	Filters access by the tag keys that are passed in the request	ArrayOfString

Warning Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Document Conventions

Amazon Interactive Video Service (ivs)

Amazon Kendra (kendra)